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AMENDMENTS TO THE SPECIFICATION 

Please replace Paragraph [0052.2] with the following paragraph rewritten in 
amendment format: 

[0052.2] The embodiment of the present invention also provides a method 
for a digital certificate issuing system with intrusion tolerance ability issuing digital 
certificate, the method includes: 

sp li tt i ng a pr i vat e k e y i nto mu l t i p le first sub - s e cr e t - k e ys and mu l t i p le s e cond sub - 
s e cr e t k e ys, wh e r ei n th e pr i vat e k e y i s construct e d by on e s e cond sub s e cr e t k e y and t 
f i rst sub - s e cr e t - k e ys, th e s e cond sub - s e cret - k e y corr e sponds to th e t f i rst sub - s e cr e t - 
k e ys accord i ng to an e quat i on comb i nat i on r e pr e s e nt a t i on, and th e numb e r t i s a 
pos i t i v e i nt e g e r splitting a private key into multiple first sub-secret-kevs and multiple 
second sub-secret-kevs. wherein the multiple first sub-secret-kevs are divided into k 
groups, and the private key is constructed by one second sub-secret-kev and t first sub- 
secret-kevs, the second sub-secret-kev corresponds to the t first sub-secret-kevs 
according to an equation combination representation including t items of j and i, j is 
sequence number of the group which has the first sub-secret-kev, and i is number of the 
first sub-secret-kev in the j th group, each of i in one equation combination representation 
is different, i, i, k, and t are positive integers, and t is less than k : 

calculating t first calculation results according to the-a_certificate to be signed and 
the t first sub-secret-keys in the multiple first sub-secret-keys upon receiving a-the 
certificate to be signed; 
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obtaining the second sub-secret-key corresponding to the t first sub-secret-keys 
according to the equation combination representation; 

calculating a second calculation result according to the second sub-secret-key 
obtained and the certificate to be signed; 

generating a digital signature according to the t first calculation results and the 
second calculation result; 

generating a digital certificate according to the digital signature and contents of 
the certificate to be signed. 
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